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(57) Abstract 



System for the safe authentication and management of registered credit instruments or documents comprising: a personalized document 
(10) provided with a microprocessor to store an identification code CIP of the holder and information on biometric characteristics of the 
same; means for releasing said document (10) to the holder, means for issuing registered credit instruments (12) or documents; means for 
validating the credit instruments (12), all of said means being provided with a device for acquiring at least one biometric characteristic 
of the holder; said credit instruments (12) comprising at least a security code univocally generated by utilizing the personal identification 
code CIP as a cryptographic key; said information being associated to a mathematical expression of the data of the fingerprint of at least a 
finger of the holder of said document (10); the recognition for the issue of the credit instrument (12) and the validation being obtained by 
comparing the information got by direct reading of the finger of the holder and the application of the mathematical expression with the one 
stored in the document (10). 
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WO 97/15032 PCT/EP95/05015 

SYSTEM FOR THE SAFE AUTHENTICATION AND MANAGEMENT OF REGISTERED 
CREDIT INSTRUMENTS AND DOCUMENTS 

This invention relates to a system for the safe authentication 
and management of registered credit instruments and documents. 
More particularly, this invention relates to a system suitable 
to identify with the utmost certainty the possessory title of a 
document which is univocally associated to the legitimate holder 
on the basis of a personalized card. 

Besides, this invention relates to the apparatuses for issuing 
the personalized card and the document and for the validation of 
the latter, with the ascertainment of its authenticity on its 
uti 1 i zation . 

Concering registered documents, special reference is made to a 
specific credit instrument utilizable for commercial transac- 
tions which are executed with the utmost security, as the possi- 
bility of an illicit use of said instrument by third parties - 
due to loss or stealing - is excluded. 

Anyhow, the same system of authentication and management may be 
utilized for any other credit instruments, such as cheques, 
share certificates'; ce rt if rc^ees^tST^Ti-d-ebtedness , savings books 
and the like, as well as personal documents or personal identi- 
fication documents, of the kind, for instance, of credit cards, 
passports, identity cards and driving licences. 

Several methods are known for the execution of the commercial 
transactions that involve the transfer of money between persons. 
Many transactions take place without any material transfer of 
currency, for instance through a bank which sees directly, upon 
request by the concerned person, to crediting the indicated 
person with a given sum- 
In other cases, the payment is through credit instruments, for 
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instance bank cheques or bank drafts, relatively to which spe- 
cial cautions are adopted, to try to avoid their forgery or 
stealing and their illicit utilization. 

Another form of payment is based on the use of credit cards, 
which authorize the holder to purchase goods or services with 
third parties having an arrangement with the issuer of said 
cards, to which the charge of the payment is transferred. 
But also this form of payment is not free from risks, as the 
credit card may get lost or be stealed and unlawfully utilized, 
even though temporarily, by non authorized third parties. 
The aforementioned payment forms, widely adooted, allow to limit 
the supply of cash, which however is still the more practical 
and direct and sometimes compulsory system to execute commercial 
transactions whose amount is not always small. Obviously the 
possession of cash gives rise to fairly serious security pro- 
blems; in fact, stealed or lost currency can be easily used by 
anyone, generally without problems, as not. even the guarantees 
exist that safeguard somehow or other the circulation of cheques 
a nd c red i t ca rds . 

With an ear 1 i.e.r . .pateni- .aw-Lication , the same applicant has 
intended to protect a system for commercial transactions suita- 
ble to obviate the aforementioned drawbacks, providing for the 
use of a personalized card integrating a microprocessor wherein 
a personal coda and information are stored deriving from the 
appli cation of a mathematical expression to the parameters 
referred to the fingerprint of at least a finger of the holder 
of the same card: based or. such document, a credit instrument is 
issued, which can be associated only to the holder, and which 
may be, by way of example, a cheque for a given sum, validable 
with businesses that have stipulated an agreement with the 
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issuer, on the conclusion of the commercial transaction. Thanks 
to the provision of the personal code and especially the tran- 
scoding of the fingerprint integrated in the card, said credit 
instrument provides guarantees of utmost security, as it cannot 
be utilized by a person other than the holder, and also the 
person who receives the payment has the utmost guarantees, as 
there is the certainty of the authenticity of the the instru- 
ment, substantially assimilable to cash- 
It has been stressed that this system is susceptible of modifi- 
cations which can furtherly improve its already high level of 
global security, allowing at the same time to create simple 
apparatuses for the validation of the credit instrument or 
securities whose circulation is limited, by way of example, 
within the frame of this invention, to banks. 

Obiect of this invention is therefore to provide a system for 
the authentication and management of registered credit instru- 
ments and documents, such as to provide the utmost security 
guarantees, causing them to be utili sable only by the holder to 
whom t hav have been : 1 eg i t i ma te 1 y i ssued . 

A f w r^t he o bject'^o f invention is to provide- said credit, 
instruments associated to the economic transaction or said 
registered documents or identity documents with a security print 
indissolubly associated to the paper support forming said inst- 
rument or document , 

A further object of this invention "is to realize simple appara- 
tuses for carrying out the different stages of the system which 
allows to implement the above defined system. 

These and still further objects are reached by the system for 
the safe authetication and management of registered credit 
instruments and documents subject matter of this invention, 
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comprisi ng : 

a personalized document incorporating a microprocessor suita- 
ble to store a personal identification code of the holder and a 
numeric information associated to biometric characteristics of 
the same holder; 

- first means for releasing said personalized document to the 
holder; 

- second means for issuing registered credit instruments or 
documents; and 

- third means to validate the use of the instruments or docu- 
ments, all of said means being associated to an information 
system and provided with a device allowing to acquire at least a 
biometric characteristic of the holder; 

said issued instruments and documents comprising at least a 
security code univocally generated by utilizing the personal 
identification code as a cryptographic key; 

said information being associated to a mathematical expression 
of the data concerning the fingerprint of at least one live 
finger of the holder of said personalized instrument or docu- 
ment ; 

the recognition of the holder, both for the issue of. the instru- 
ment or document and for the related validation, being obtained 
bv comparing the information got through the direct reading of 
the live finger of the holder and the application of the mathe- 
matical expression with the information stored in the personali- 
zed documents . 

The characteristics of the system for the safe authentication 
and management of registered credit instruments and documents 
subject matter of this invention will be better understood from 
the following description, wherein reference is made to the 
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attached drawings which show schematically a preferred non 
limitative embodiment of the same system, r^f^rred by way of 
example to a credit instrument, and wherein: 

Fig. 1 shows the block diagram of the issue stage of the perso- 
nalized card; 

Fig. 2 shows the block diagram of the issue stage of the credit 
instrument, based on said personalized card; 

Fig. 3 shows the block diagram of the validation stage of the 
credit instrument associated to the personalized card. 
With reference to the aforementioned figures, the system for the 
safe authentication and management of registered credit instru- 
ments and documents subject matter of this invention comprises 
basically a personalized document 10 and a paper support forming 
the credit instrument 12. The personalized document or smart- 
card 10, formed, by way of example, by a card having dimensions 
similar to those of the conventional credit cards, incorporates 
a mic roorocessor wherein there are stored a personal identifica- 
tion coda TIP and a mathematical expression associated to at 
least one fingerprint of the person who requires of the issuing 
"institution, for instance a bank, said card* iOT "t"o ! 'uti-liz'ef^t he- 
system subject matter of this invention rGf^rretd to a credit 
instrument to perform commercial transactions. The personal 
identification code CIP, for instance in the form of an alphanu™ 
merical sequence univocally associated to each holder, is gene- 
rated by the information system of the issuer SI and sent to the 
apparatus for the personalization of card 10, of which more will 
be said in the following. The mathematical expression stored in 
the microprocessor of card 10 is advantageously formed by an 
algorithm of the DES type (Data Encryption Standard), which 
allows to transcode the parameters associated to the fingerprint 
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of one or more fingers of the applicant, forming therefore a 
unique feature of the same. 

In the microprocessor of card 10 there are also stored, accor- 
ding to a preferred non critical embodiment, particulars and tax 
number of the applicant, as well as the current account number, 
complete with the bank co-ordinates, for the domiciliation of 
the credit instruments to be issued and negotiated. 

The credit instrument 12, which is the means for the execution 
of the economic transaction through the system subject matter of 
this invention, is formed by a support, preferably from paper, 
whose scheme is shown in Figs, 2 and 3, shooed, by way of exam- 
ple, like bank cheques or drafts; anyhow, said support may also 

/ 

be of diffent size, as the system of this invention concerns in 
general all of the credit instruments, as for instance savings 
books, share and deposit certificates, besides the mentioned 
personal documents or personal identification documents. Accor- 
ding to a TprsfEirrejd embodiment, said support, has the configura- 
tion of a conventional cheque, for instance from watermarked 
paper, which is authenticated on the basis of the data previou- 
sly stored in the microprocessor of. card w lC I n^. ;r parjicular , 
through an apparatus of which more will be said in the follo- 
wing, a dot coding (not interpratable at sight) is provided., 
along a prefixed field, on the paper support forming the credit 
instrument 12, which coding defines, for instance, the issuing 
date, the code of the issuing institution and the amount of said 
instrument- The same data, are also formed along a distinct- 
field, expressed in cryptographic form through a key made up by 
the aforementioned personal identification code stored in card 
10. 

According to a further characteristic of the invention, the 
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support forming the credit instrument or security 12 is provided 
with a security print 14, of any shape and size, made up by two 
or more zones with different light reflection; said zones are 
formed by an alternation of embossed and hollow sectors, circum- 
scribed by approached lines differently oriented by groups 
relatively to one another. Impression 14 as a whole is obtained 
in reflecting or metallic ink, through offset and dry copper- 
plate printing processes- The characteristics of the mentioned 
security print with which the support forming the credit inst- 
rument 12 is advantageously provided are not described in de- 
tail, being the subject matter of an autonomous patent applica- 
tion registered in Italy by the same applicant. 

For the implementation of the system of this invention, by way 
of example and not critically rsfarrGd to a credit instrument to 
carry out commercial transactions, specific apparatuses are 
supplied, some of which have already bean mentioned: there are, 
i n pa r r. i c u 1 a r , a f i r s t a ppa r a t us a 1 1 o w i ng to issue the pe rsona- 
1 i z e d docume n t , in t h e followi ng referr e d to as card, a nd a 
second apparatus which, against the recognition of the applicant 
,throuqh the parameters "stored" i~rf ""the" s TfTi c r o p r o c e s s o r of said 
card, allows to issue the credit instrument and to authenticate 
it uni vocally. A third apparatus , described in detail later on. 
validates the instrument on its utilization, by means of a 
triangulation. 

The first, apparatus, shown as a scheme in Fig. 1, allows to 
realize the starting stage of the system of this invention, 
issuing the document or personalized card lO. Said apparatus 
comprises a personal computer 16, connected to the information 
system ST of the issuing institution, for instance a bank, 
through a communication line IS; the information system SI 
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checks, through the connection with the anagraphical file and 
current accounts file of the institution or body issuing card 
10, the existence of the corresponding data (particulars and 
Proprietary title of the applicant) relative to the person 
reauirinc said card. The apparatus comprises also a 
reader/encoder 20 of card 10 to be personalized, an a biometric 
identity sensor 22. The reade r /encode r 20, connected to the 
personal computer 16 and consequently to the information system 
SI throiioh line 18, receives from the latter the personal iden- 
tification code CIP; the biometric sensor 22, connected to or 
integrated in the reader-encoder 20, senses and transcodes the 
print or fingerprints of the applicant, who puts the finger or 
fingers in sequence on a special seat 24 obtained on the same 
sensor 22. The latter is obviously provided with one or more 
openings (not shown) for the introduction and coming out of card 
lO to be personalized. 

The apparatus schematically shown in Fig. 2. which realizes the 
second stage of the system subject matter of this invention 
issuinc! the credit, instrument 12 based on the data of card 10, 
is substantially - formed by. .t.-he„same- = com P onents as the preceding 
apparatus, with the addition of a printer. In detail, said 
apparatus comprises a personal computer 26 connected to the 
information system SI of the issuing institution through a 
communication line 28 and a software programme SWS, a reader 30 
of the Personalized smart-card 10, an identity reader or biome- 
tric sensor 32 having a seat 34 where the applicant puts the 
finger or fingers, and a printer 36, preferably an ink jet 
printer with graphic printing modalities. Said printer prints in 
cryptograohied form, on the paper support forming the credit 
instrument 12 which is inserted in it, a security code formed on 
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the basis of the data existing on card 10, authenticating said 
instrument. Printer 36 is provided with a conventional 
opening(s) (not shown) for the introduction and coming out of 
the credit instrument 12 to be authenticated. 

For the implementation of the system subject matter of this 
invention a third apparatus is provided, schematically shown in 
Fig- 3. analogous to the preceding one and provided with further 
functions, being utilized in the last stags on the utilization 
and validation of the credit instrument 12. Said apparatus 
comprises a personal computer 40 connected to the information 
system SI of the issuing institution through a communication 
line 42 and a software programme SWC , a reader 44 of smart-card 
l.O, a b.iornetric identity sensor with a seat SO where the appli- 
cant nut the finger or fingers, and a printer 48. The latter is 
provided with a device which provides to the possible invalida- 
tion of the negotiated instrument 12. 

The biornetric sensor, comprised in all the above described 
apparatuses, is substantially made up by a terminal controlled 
by an built-in microprocessor specialized for the check of the 
identity based on the ' biomatrical data of the fingers and the 
technology of the card. Both the built-in application and the 
data reside in an internal RAM permanently fed by a lithium 
battery; the security is ensured by a built-in microprocessor 
and bv a built-in tamper proof security microprocessor, with 
secrete keys, independent and unalterable, for the DES crypto- 
graphy, permanently feci by the lithium battery. 

The system for the safe authentication and management of regi- 
stered credit instruments and documents subject matter of this 
invention is articulated, as concerns the development of the 
operations, according to the following modalities. 
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Distinction is made, as specified above, between three different 
operati ng stages : 

- issuinq of the personalized smart-card 10; 

- issuing of the instrument or security 12 with security apposi- 
tion; 

~ treatment of instrument 12 with authentication of the holder. 
The first stage is associated with the issue of card 10, which 
has preferably a temporary validity; through the apparatus 
schematically shown in Fig. 1, card ].o to be personalized is 
introduced, through a special slit (not shown), in the 
reader /encoder 20 . Mow, the connection is made with the informa- 
tion syr.tem SI of the issuing institution through the communica- 
tion- line 18, to record the issuing operation of card 10 and to 
receive from the same system the personal identification code 
OTP of the client. Said code is stored in the microprcessor of 
card lO by the r eads >r -encoder 20 in a protected manner, 'prefera- 
bly in the form of an a 1 pha nume r i ca 1 sequence. At the same time,, 
the appiicant puts the finger on seat 24 of the biometric sensor 
22; the print, or possibly several prints, corresponding to as 
...many.„fj...naars i ^.,a^e stored in the microprocessor of card 10- in- 
tran'scoded and protected form with the personal identification 
code CIP, During this stage, performed by the biometric sensor 
22, further indications are preferably stored in card 10, such 
as, for instance, the expiry data of the same card and the 
particulars of the client or other data. 

Following this op£>r3>tion^ card 10 is univocally personalized and 
allows to start the second stage which, through the apparatus 
schematically shown in Fig. 2, causes the issuing of the credit 
instrument or document 12, introduced in printer 36. The mentio- 
ned security print 14 in metallic or reflecting ink is already 
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present on the paper support forming said instrument. During 
this issuing stage, through printer 36 a security code is prin- 
ted, for instance of the known type PDF 417, subdivided into two 
parts that are not i nte r pre tabl e at sight; the first part of 
said code includes all the data relating to the release of the 
instrument (for instance, data and place of issue, institution 
and branch, document number, etc), while the second part of the 
code comprises the same data as the first one, expressed in 
crvptoaraphied form by means of the key formed by the personal 
identification code CIP, which can be univocally associated as 
such to the person requiring the credit instrument 12. The 
applicant puts the finger in correspondence of seat 34 of the 
biometn'c sensor 32 for the validation of his own print against 
the one stored in protected form in card lO and sensed by 
reader 30 , Reader 3C autonomously provides to reading the data 
of card .1.0 through the mathematical expression or algorithm and 
the personal identification code CIP of the applicant: such code 
is therefore utilized as a cryptographic key to generate the 
security code which printer 36 prints on the paper support 
forming the credit instrument or security or document 12. Also 
in this case, the details of the transaction are recorded 
through the communication line 20 in the information system SI 
of the issuing institution. 

Now the applicant has a univocally personalized credit instru- 
ment 12, which he can use in case of need giving his card, also 
personalized, to the personnel who performs the treatment and 
authentication of the same instrument through the third appara- 
tus schematically shown in Fig. 3. 

Supposing that the system subject matter of this invention be 
limited to the credit institutions where the two first apparatu- 
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ses are installed, also the third apparatus will be installed in 
the same institutions or with a branch. The owner of the perso- 
nalized instrument 12 introduces preliminarily in reader 44 of 
said apparatus his. card 10 and at the same time or immediately 
after, outs his finger on seat 50 of the biometric sensor 46, 
for the validation of his print against the one stored in pro- 
tected form in the microprocessor of the same card. In case of 
positive recognition, reader 44 reads on card 10 the personal 
identification code CIP of the owner of instrument 12, which is 
adopted as a key to check the consistency between the two parts 
of th~ security code, utilizing the same mathematical expression 

of crvotography used on the issue of said instrument. The pori 

tive rerognition, based on the univocal aspect of the finger- 
print with the contextual activation of the other two elements, 
confirms the validity of document 12, exluding any illicit 
utilization of the same. Now printer 48 can provide to the 
invalidation of instrument 12, while the personnel of the branch 
a s 3 i ci .-i s t h e s u m of m o n e y c o r res p o n d i n g to t h a v a 1 u e of said 
instrument or validates the authentication of the person. The 
invalidation stage of the credit instrument s - -:made^ by -printing 
on t h e r>a pa r s u ppo r t forming the same instrument a writing, for 
instance "negotiated" or "paid" through said printer 48. Through 
the communication line 42, connected to the information system 
S I , a 1 s o this ending stage of the t r a n s a c t i o n i s recorded. 
One should anticipate that the operations concerning the issue 
stage of card 10 with the intervention of the first apparatus 
may comprise also the issue of a further card for a co-holder 
whose particulars are obtained with the same modalities descri- 
bed above. One should also anticipate that the same apparatus 
issuing the card may provide, also to the renewal of the same, 
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th the updating of the particulars on the client and/or the 
issue of a new personalized document. 

As can be understood from the above, the system for the authen- 
tication and management of registered credit instruments and 
documents subject matter of this invention provides guarantees 
of utmost security; in fact, the issued instruments can be 
exacted only by the legitimate holder based on a precise and 
uni vocal check. 

The advantages of said system, which, as described above, may be 
adopted to prevent the risk connected to the circulation of any 
registered credit instrument or document, are especially evident 
if said instrument, attributes the holder the ready availability 
of a given amount of money; in fact, the same holder can readily 
cash the corresponding sum with any body having entered an 
agreement with the issuer, disposing therefore of cash in hand, 
without running any risk. 

Even in the unlikely hypothesis of a contemporaneous loss or 
steal ina of the personalised credit instrument and the card, the 
monev rvnnot be cashed bv third parties as on the check made 
before paying', ■ there would be no correspondence - .between -the 
fingerprint of the holder and the one stored in the card micro- 
prccesso r . 

Anyhow, the invention, as described hereabove and claimed he- 
reafter, has been proposed by way of example, being obvious that 
the same may be susceptible of many changes and variants, all of 
them falling however withing the invention concept. 

For instance. the apparatus for the issue of the registered 
credit instrument or document and the apparatus for the related 
validation, and possibly also the first apparatus providing to 
issuing the personalized card, might be incorporated in only 
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apparatus; in tha same way, the card reader and the biometric 
sensor comprised in the second and the third apparatus might be 
incorporated in one only station. 

Lastly, while the system has been proposed by way of example for 
a realization within the bank ciruit, further possibilities are 
not to be excluded in this regard: in fact, the basic need of 
havinq several places available for the fruition of the system 
may be satisfied by different bodies, for instance Post Offices, 
Communes or local administrations in general . 
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CLAIMS 

1 . A system for the safe authentication and management of regi- 
stered credit instruments and documents, comprising: 

- a personalized document (lO) incorporating a microprocessor 
suitable to store a personal identification code CIP of the 
holder and a numeric information associated to biometric charac- 
teristics of the same holder; 

- first means for issuing said personalized document (10) to the 
holder ; 

- second means for issuing registered credit instruments (12) or 
documents; and 

third means for validating the use of the registered instru- 
ments (12) or documents, all of said means being either associa- 
ted or not associated to an information system 51 and provided 
with a device for acquiring at least one biometric characteri- 
stic of the holder; 

said registered instruments (12) or documents issued comprising 
at least a security code univocally generated utilizing the 
personal identification code CIP as a cryptographic key; 
sa"id*'^i'n formation "being associated to a mathematical expression" 
or algorithm of the data related to the fingerprint of at least 
a live finger of the holder of said personalized document (lO); 
the recognition of the holder, both for the issue of the regi- 
stered instrument or document and for the related validation, 
being obtained by comparing the information got through the 
direct reading of the finger of the holder and the application 
of the mathematical expression with the one stored in the perso- 
nalized document (10). 

2. The system according to claim 1, characterized in that said 
mathematical expression is formed by an algorithm of the DES 
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type . 

3. The svstem according to claims 1 and 2, characterized in that 
said means for the release of the personalized document (lO) 
comprise a oersonal computer (16) connected to a reads r /encode r 
(20) for storing in protected form in the microprocessor of the 
document (10) said personal identification code CIP of the 
holder supplied by the information system SI of the issuing 
institution through a communication line (18), and a biometric 
sensor (22) for storing in transcoded form in the same micropro- 
cessor, to form said numeric information or algorith, at least a 
finasrprint of the holder, who puts the finger in correspondence 
of a seat (24) of said sensor. 

4. The svstem according to claims 1 and 2. characterized in that 
said means for issuing credit instruments or documents (12) 
comorise a personal computer (26) connected to the information 
svstem of the issuing institution throuah a communication line 
(28). .?. reader (30) of the personalized document (10), a biome- 
tric censor (32) and a printer (36) provided with graphic moda- 
lity ro> printing on said credit instruments (12) a security 
coda ..not^intenpretable at sight, generated by said personal, 
identification code CIP, utilized as a cryptographic key and 
sensed by sensor (32) in case of positive recognition following 
the comoarison between the fingerprint of the holder, who puts 
the live finger on a seat (34) of said sensor, and the one. 
stored in protected form, forming the numeric information, in 
the microprocessor of the document (lO). 

5. The system according to one or more of the preceding claims, 
characterized in that said means for validating the use of the 
credit instruments or documents (12) comprise a personal compu- 
ter r40) connected to the information system SI of the issuing 
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institution through a communication line (42), a reader of the 
personalized document (10), a biometric sensor (46) and a prin- 
ter (48) provided with graphic modality for invalidating said 
credit instruments (12) in case of positive recognition follo- 
wing the comparison between the print of the holder, who puts 
the live finger on a seat (50) of the same sensor, and the one 
stored i n protected form, forming the numeric information, in 
the microprocessor of the document (10). 

6. The svstem according to one or more of the preceding claims, 
characterized in that said credit instruments or documents (12) 
are nade uo by a paper support on which there is obtained a 
security print (14) in reflecting or metallic ink, having two or 
more zones with different light reflection, said zones being 
formed by alternating embossed or hollow sectors, circumscribed 
by accroached lines differently oriented by groups relatively to 
one a no the r . 

7. The svstem according to one or more of ths preceding claims, 
characterized in that said means for the release of the persona- 
li zed document (10) ; the issue of registered credit instruments 
or documents (12) and the validation to the use" of the" same 
reqistsred instruments or documents are independent on or inte- 
orated in one or mo r e a ooa r a t u s e s . 

8. The svstem according to one or more of the preceding claims, 
characterized in that said means for the release of the persona- 
lized document (10), the issue of registered credit instruments 
or documents (12) and the validation of the same registered 
credit instruments or documents are combined with one another 
depending on the card (10), the same registered credit instru- 
ments or documents (12) and/or the related paper support. 
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